Warning: Permanently added '10.128.1.220' (ED25519) to the list of known hosts. 2025/07/11 13:49:46 ignoring optional flag "sandboxArg"="0" 2025/07/11 13:49:47 parsed 1 programs [ 50.665355][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 50.665364][ T24] audit: type=1400 audit(1752241788.330:101): avc: denied { create } for pid=413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.692316][ T24] audit: type=1400 audit(1752241788.330:102): avc: denied { write } for pid=413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.713110][ T24] audit: type=1400 audit(1752241788.330:103): avc: denied { read } for pid=413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.733508][ T24] audit: type=1400 audit(1752241788.360:104): avc: denied { unlink } for pid=413 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 50.733532][ T413] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.379829][ T24] audit: type=1400 audit(1752241789.040:105): avc: denied { create } for pid=440 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.555584][ T24] audit: type=1401 audit(1752241789.220:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 51.592286][ T461] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.599336][ T461] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.607205][ T461] device bridge_slave_0 entered promiscuous mode [ 51.614027][ T461] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.621046][ T461] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.628471][ T461] device bridge_slave_1 entered promiscuous mode [ 51.656544][ T461] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.663583][ T461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.670781][ T461] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.677803][ T461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.692974][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.700649][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.708031][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.716721][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.725603][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.732746][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.740952][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.749264][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.756430][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.766874][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.776043][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.788195][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.798361][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.806963][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.814802][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.823486][ T461] device veth0_vlan entered promiscuous mode [ 51.832869][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.841886][ T461] device veth1_macvtap entered promiscuous mode [ 51.850538][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.860339][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/07/11 13:49:49 executed programs: 0 [ 52.013011][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.020037][ T471] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.027605][ T471] device bridge_slave_0 entered promiscuous mode [ 52.034783][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.041974][ T471] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.049564][ T471] device bridge_slave_1 entered promiscuous mode [ 52.082057][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.089621][ T471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.096914][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.103943][ T471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.118892][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.126693][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.134275][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.146715][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.155724][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.162767][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.171491][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.179722][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.186784][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.204219][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.213449][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.225859][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.240108][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.248372][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.256024][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.264212][ T471] device veth0_vlan entered promiscuous mode [ 52.273643][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.289083][ T471] device veth1_macvtap entered promiscuous mode [ 52.298078][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.307733][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.332211][ T24] audit: type=1400 audit(1752241790.000:107): avc: denied { read write } for pid=475 comm="syz.2.16" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.356490][ T24] audit: type=1400 audit(1752241790.000:108): avc: denied { open } for pid=475 comm="syz.2.16" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.387616][ T24] audit: type=1400 audit(1752241790.000:109): avc: denied { ioctl } for pid=475 comm="syz.2.16" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.425980][ T476] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 52.452389][ T24] audit: type=1400 audit(1752241790.120:110): avc: denied { mount } for pid=475 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.492807][ T477] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm vhost-476: bg 0: block 234: padding at end of block bitmap is not set [ 52.622740][ T482] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 52.661919][ T483] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm vhost-482: bg 0: block 234: padding at end of block bitmap is not set [ 52.784917][ T489] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 52.806126][ T488] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.18: bg 0: block 234: padding at end of block bitmap is not set [ 52.882285][ T495] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 52.907106][ T494] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.19: bg 0: block 234: padding at end of block bitmap is not set [ 52.992758][ T501] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 53.018502][ T502] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm vhost-501: bg 0: block 234: padding at end of block bitmap is not set [ 53.142598][ T507] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue [ 53.168393][ T508] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm vhost-507: bg 0: block 234: padding at end of block bitmap is not set [ 53.184449][ T300] ------------[ cut here ]------------ [ 53.190204][ T300] kernel BUG at fs/ext4/inode.c:2778! [ 53.195833][ T300] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 53.201902][ T300] CPU: 0 PID: 300 Comm: kworker/u4:3 Not tainted 5.10.238-syzkaller-1007487-g59e9a7228857 #0 [ 53.212281][ T300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.222323][ T300] Workqueue: writeback wb_workfn (flush-7:2) [ 53.228280][ T300] RIP: 0010:ext4_writepages+0x2ddb/0x2e00 [ 53.234144][ T300] Code: 39 94 ff 84 db 75 31 e8 b3 36 94 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 8b 5c 24 38 e9 21 f8 ff ff e8 95 36 94 ff <0f> 0b e8 8e 36 94 ff e8 65 0d 31 ff eb 98 e8 82 36 94 ff e8 59 0d [ 53.254171][ T300] RSP: 0018:ffffc90000c87180 EFLAGS: 00010293 [ 53.260316][ T300] RAX: ffffffff81cf5d7b RBX: 0000008410000000 RCX: ffff88810a89a780 [ 53.268274][ T300] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 53.276226][ T300] RBP: ffffc90000c874f0 R08: dffffc0000000000 R09: ffffed102548b242 [ 53.284176][ T300] R10: ffffed102548b242 R11: 1ffff1102548b241 R12: dffffc0000000000 [ 53.292550][ T300] R13: ffff8881186df000 R14: 0000008000000000 R15: ffff88812a459208 [ 53.300596][ T300] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 53.309595][ T300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.316183][ T300] CR2: 000055557ca544a8 CR3: 000000010cb68000 CR4: 00000000003506b0 [ 53.324399][ T300] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.332349][ T300] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.340304][ T300] Call Trace: [ 53.343574][ T300] ? sched_clock+0x3a/0x40 [ 53.348046][ T300] ? activate_task+0xa0/0xa0 [ 53.352608][ T300] ? yield_to_task_fair+0x150/0x150 [ 53.357868][ T300] ? update_rq_clock+0xcb/0x660 [ 53.362695][ T300] ? ext4_readpage+0x220/0x220 [ 53.367442][ T300] ? check_preempt_curr+0xd1/0x190 [ 53.372527][ T300] ? _raw_spin_unlock+0x4d/0x70 [ 53.377476][ T300] ? update_load_avg+0x4dc/0x14f0 [ 53.382495][ T300] ? ext4_readpage+0x220/0x220 [ 53.387245][ T300] do_writepages+0x12a/0x270 [ 53.391810][ T300] ? __writepage+0x130/0x130 [ 53.396411][ T300] ? __kasan_check_write+0x14/0x20 [ 53.401523][ T300] ? _raw_spin_lock+0x8e/0xe0 [ 53.406193][ T300] ? __kasan_check_write+0x14/0x20 [ 53.411285][ T300] ? _raw_spin_lock+0x8e/0xe0 [ 53.415936][ T300] __writeback_single_inode+0xd5/0xa20 [ 53.421372][ T300] ? wbc_attach_and_unlock_inode+0x171/0x590 [ 53.427340][ T300] writeback_sb_inodes+0x860/0x1400 [ 53.432550][ T300] ? queue_io+0x4c0/0x4c0 [ 53.436860][ T300] ? __kasan_check_read+0x11/0x20 [ 53.441850][ T300] ? queue_io+0x385/0x4c0 [ 53.446433][ T300] wb_writeback+0x3e3/0xb90 [ 53.450927][ T300] ? wb_io_lists_depopulated+0x180/0x180 [ 53.456539][ T300] ? set_worker_desc+0x155/0x1c0 [ 53.461445][ T300] ? sched_clock_cpu+0x1b/0x3d0 [ 53.466271][ T300] ? __kasan_check_write+0x14/0x20 [ 53.471821][ T300] ? newidle_balance+0x7d2/0xa90 [ 53.476835][ T300] wb_workfn+0x38f/0xe20 [ 53.481063][ T300] ? inode_wait_for_writeback+0x200/0x200 [ 53.486752][ T300] ? find_next_bit+0x80/0x100 [ 53.491414][ T300] ? _raw_spin_unlock_irq+0x4e/0x70 [ 53.496581][ T300] ? finish_task_switch+0x12e/0x5a0 [ 53.501784][ T300] ? __switch_to_asm+0x34/0x60 [ 53.506619][ T300] ? __schedule+0xb4f/0x1310 [ 53.511276][ T300] ? __kasan_check_read+0x11/0x20 [ 53.516275][ T300] ? read_word_at_a_time+0x12/0x20 [ 53.521350][ T300] ? strscpy+0x9b/0x290 [ 53.525471][ T300] process_one_work+0x6e1/0xba0 [ 53.530287][ T300] worker_thread+0xa6a/0x13b0 [ 53.535042][ T300] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 53.540498][ T300] ? __kasan_check_read+0x11/0x20 [ 53.546624][ T300] kthread+0x346/0x3d0 [ 53.550867][ T300] ? worker_clr_flags+0x190/0x190 [ 53.556168][ T300] ? kthread_blkcg+0xd0/0xd0 [ 53.560773][ T300] ret_from_fork+0x1f/0x30 [ 53.565186][ T300] Modules linked in: [ 53.571502][ T300] ---[ end trace 78964e8374f14011 ]--- [ 53.572695][ T49] device bridge_slave_1 left promiscuous mode [ 53.576987][ T300] RIP: 0010:ext4_writepages+0x2ddb/0x2e00 [ 53.589167][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.589205][ T300] Code: 39 94 ff 84 db 75 31 e8 b3 36 94 ff 49 bc 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 8b 5c 24 38 e9 21 f8 ff ff e8 95 36 94 ff <0f> 0b e8 8e 36 94 ff e8 65 0d 31 ff eb 98 e8 82 36 94 ff e8 59 0d [ 53.616319][ T300] RSP: 0018:ffffc90000c87180 EFLAGS: 00010293 [ 53.616496][ T49] device bridge_slave_0 left promiscuous mode [ 53.622602][ T300] RAX: ffffffff81cf5d7b RBX: 0000008410000000 RCX: ffff88810a89a780 [ 53.622608][ T300] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 53.622621][ T300] RBP: ffffc90000c874f0 R08: dffffc0000000000 R09: ffffed102548b242 [ 53.628946][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.636999][ T300] R10: ffffed102548b242 R11: 1ffff1102548b241 R12: dffffc0000000000 [ 53.668769][ T49] device veth1_macvtap left promiscuous mode [ 53.668844][ T300] R13: ffff8881186df000 R14: 0000008000000000 R15: ffff88812a459208 [ 53.675090][ T49] device veth0_vlan left promiscuous mode [ 53.682867][ T300] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 53.697572][ T300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.704379][ T300] CR2: 000055557ca544a8 CR3: 000000010cb68000 CR4: 00000000003506b0 [ 53.712388][ T300] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.720355][ T300] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.728398][ T300] Kernel panic - not syncing: Fatal exception [ 53.734701][ T300] Kernel Offset: disabled [ 53.739004][ T300] Rebooting in 86400 seconds..